Added permission check to every view, closes #808

This commit is contained in:
Simon Willison 2020-06-06 22:30:36 -07:00
commit 86dec9e8ff
13 changed files with 220 additions and 2 deletions

View file

@ -22,6 +22,7 @@ class IndexView(BaseView):
self.ds = datasette
async def get(self, request, as_format):
await self.check_permission(request, "view-index")
databases = []
for name, db in self.ds.databases.items():
table_names = await db.table_names()